If kui is just the interface, then how come when you quit the control panel the kernel is still running?

Click to expand...

Not sure what you are asking here, but it would make no sense if closing the GUI should stop the kernel service. Also when you quit the GUI what actually happen is that it's minized to systray so it's not actually closed. That's why nod32kui.exe is still running after you quit the GUI.

Take a look at the help file and see if it clears some things up in your mind.

The NOD32 Control Center is the central management program of the NOD32 antivirus system. The system consists of the following threat protection modules:

AMON – the resident (running in operating memory at all times) or file system monitor. This program is the most crucial antivirus defense tool and should always be enabled.
NOD32 – (also referred to as the "on-demand" scanner) this is the scanner executed manually by the user, or automatically by the scheduler.
IMON (Internet MONitor) - this scanner provides the first line of defense by monitoring Internet traffic (POP3 protocol for e-mail and HTTP for files downloaded from the Internet via HTTP)
DMON (Document MONitor) - this scanner provides protection from macro viruses in MS Office documments, works with applications utilizing MS Antivirus API (e.g. MS Office 2000 and higher, Internet Explorer 5.0 and higher)
EMON (Email MONitor) – this scanner provides protection from email-borne viruses for MAPI compatible mail clients
The other Control Center sections are:

Update – this program provides automatic Internet/network update of key system elements including the executables and virus signature databases (a valid username & password is required).
Logs – a management tool for maintaining the system, virus alert, and on-demand scanner logs.
NOD32 System Tools – includes a variety of tools making the use of the NOD32 Antivirus System's user-friendly and powerful features. Includes Quarantine, Scheduler/Planner, Information, and System Setup.
To open the NOD32 Control Center, click on the icon located in the system tray (located to the left of the clock in the lower right corner of the screen). If the icon is unavailable, click on: Start -> Programs (All programs) -> ESET -> NOD32 Control Center.

Main Window

The main window of the NOD32 Control Center contains the list of installed system modules and features (the only exception is the on-demand scanner – its icon is available on the system desktop and it can also be executed as as a scheduled task). The following groups are available in the main window: Resident modules and filters, Update, Logs, and NOD32 System Tools. More detailed descriptions of each group are presented below. To navigate within the main Control Center window, use the mouse or up/down arrow keys.

Resident modules and filters

The Resident modules and filters are the scanners that remove existing virus infections and prevent new ones from entering your computer. Click on the following links to learn more about these modules

Mirror - Provides creation of a copy of update files for updating other worsktations in the netowrk from a local computer
Update - Provides setup for the automatic Internet update of all system components (virus signature databases and executables).
Logs

Performance monitoring of the NOD32 System programs (Update, AMON, On-demand scanner, IMON, etc.) is available in a centrally created system of log files and records. Activity of each module is stored in a separate log which can later be retrieved and inspected. For further details on available log files click on one of the following links.

Event Log
Threat Log
On-Demand Scanner Logs
NOD32 System Tools

The NOD32 System Tools section includes Quarantine, Scheduler/Planner, Information, and NOD32 System Setup. For further information on each of these features, click on the corresponding item below.

Quarantine - management of the quarantine folder
Scheduler/Planner - a powerful program to schedule various tasks
Information - on the installed version of the NOD32 system and the computer's operating system
NOD32 System Setup - a general settings tool to configure graphics, interactivity, security, warnings/notifications, the Log maintenance features of the NOD32 system and ThreatSense.Net Early Warning System
Buttons

The three buttons located in the bottom part of the main Control Center window can be used to hide the window, quit the application and invoke the on-line help system.

Hide – Hiding the window will not stop the program. All warning/notification messages will be sent if applicable.
Quit – Quitting the application will disable the notification system (warnings and event notification messages will not be sent).
Help – Invokes the interactive on-line help system.